[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:cis\u002F10":3},{"item":4,"lessons":16,"controls":66,"related":96},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"cis","10","Control 10","Malware Defenses",305,"Center for Internet Security (CIS)","**What it asks for.** Organisations should prevent or control the installation, spread and execution of malicious code on their assets. This includes centrally managed anti-malware, automatic updates and protections against common delivery methods such as removable media and autorun.\n\n**In practice.** Endpoint protection or EDR is deployed on all supported endpoints and servers, managed centrally and updated automatically, with behaviour based detection enabled. Autorun is disabled, removable media is scanned or restricted, and exploit protection features of the operating system are turned on. Auditors expect deployment coverage reports, evidence that agents are healthy and current, and records of how alerts are triaged.\n\n**Common gaps.** Coverage gaps on servers, Linux systems and unmanaged devices are common, as are agents that are installed but outdated or in a passive mode. Alerts are sometimes generated with nobody responsible for acting on them.",null,"https:\u002F\u002Fwww.cisecurity.org\u002Fcontrols\u002Fmalware-defenses","Read the control at CIS","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"fake-ai-brand-impersonation-campaigns-target-enterprise-developers","Fake AI Brand Impersonation Campaigns Target Enterprise Developers","2026-10-16T22:20:50.472+00:00",{"slug":23,"title":24,"published_at":25},"aomei-backupper-update-servers-hijacked-to-distribute-backdoor","AOMEI Backupper Update Servers Hijacked to Distribute Backdoor","2026-10-16T18:21:08.893+00:00",{"slug":27,"title":28,"published_at":29},"claude-code-desktop-flaw-enabled-html-based-credential-theft","Claude Code Desktop Flaw Enabled HTML-Based Credential Theft","2026-10-16T18:20:18.997+00:00",{"slug":31,"title":32,"published_at":33},"ai-powered-android-defenses-target-voice-cloning-and-messaging-scams","AI-Powered Android Defenses Target Voice Cloning and Messaging Scams","2026-10-15T20:20:20.548+00:00",{"slug":35,"title":36,"published_at":37},"fake-ai-tools-used-to-distribute-malware-and-steal-business-credentials","Fake AI Tools Used to Distribute Malware and Steal Business Credentials","2026-10-15T14:21:08.398+00:00",{"slug":39,"title":40,"published_at":41},"cikabika-rat-abuses-discord-and-ngrok-to-evade-detection","CikaBika RAT Abuses Discord and Ngrok to Evade Detection","2026-10-15T12:20:40.147+00:00",{"slug":43,"title":44,"published_at":45},"hardware-implants-in-crypto-wallets-expose-supply-chain-risks","Hardware Implants in Crypto Wallets Expose Supply-Chain Risks","2026-10-14T18:20:46.881+00:00",{"slug":47,"title":48,"published_at":49},"hirudo-trojan-replaces-legitimate-banking-apps-to-steal-credentials","Hirudo Trojan Replaces Legitimate Banking Apps to Steal Credentials","2026-10-14T12:20:48.409+00:00",{"slug":51,"title":52,"published_at":53},"researchers-breach-windows-smartscreen-vbs-enclave-via-memory-write-and-timing-flaw","Researchers Breach Windows SmartScreen VBS Enclave via Memory Write and Timing Flaw","2026-10-14T08:21:27.74+00:00",{"slug":55,"title":56,"published_at":57},"record-1411-vulnerabilities-patched-including-3-zero-days-in-microsoft-october-2026-patch-tuesday","Record 1,411 Vulnerabilities Patched Including 3 Zero-Days in Microsoft October 2026 Patch Tuesday","2026-10-13T20:20:18.566+00:00",{"slug":59,"title":60,"published_at":61},"xworm-rat-evolves-into-full-surveillance-platform-via-leaked-source-code","XWorm RAT Evolves Into Full Surveillance Platform via Leaked Source Code","2026-10-13T12:21:02.686+00:00",{"slug":63,"title":64,"published_at":65},"p7-darksword-ios-exploit-kit-targets-crypto-wallets-and-keychain-data","P7 DarkSword iOS Exploit Kit Targets Crypto Wallets and Keychain Data","2026-10-09T18:20:57.498+00:00",[67,72,77,81,86,91],{"slug":68,"name":69,"problem":70,"stories":71},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",247,{"slug":73,"name":74,"problem":75,"stories":76},"patch-management","Automated patch management","Known holes get closed in days, not months.",63,{"slug":78,"name":79,"problem":80,"stories":76},"security-awareness-training","Security awareness training and phishing simulation","People recognise and report attacks instead of falling for them.",{"slug":82,"name":83,"problem":84,"stories":85},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",59,{"slug":87,"name":88,"problem":89,"stories":90},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",42,{"slug":92,"name":93,"problem":94,"stories":95},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",39,[97,103,109,114,120,125,130,135],{"family":98,"item":99,"code":100,"title":101,"together":102},"nist-800-53","si-3","SI-3","Malicious Code Protection",187,{"family":104,"item":105,"code":106,"title":107,"together":108},"gdpr","32","Article 32","Security of processing",122,{"family":5,"item":110,"code":111,"title":112,"together":113},"2","Control 2","Inventory and Control of Software Assets",109,{"family":115,"item":116,"code":117,"title":118,"together":119},"nist-csf","de-cm","DE.CM-1","Continuous Monitoring",102,{"family":5,"item":121,"code":122,"title":123,"together":124},"13","Control 13","Network Monitoring and Defense",101,{"family":126,"item":127,"code":128,"title":128,"together":129},"itil","overview","ITIL",88,{"family":5,"item":131,"code":132,"title":133,"together":134},"7","Control 7","Continuous Vulnerability Management",73,{"family":5,"item":136,"code":137,"title":138,"together":139},"14","Control 14","Security Awareness and Skills Training",62]